„NSO Group and Candiru (Israel) were added to the Entity List based on evidence that these entities developed and supplied spyware to foreign governments,“ the statement read, adding that the spyware‘s tools were used „to maliciously target government officials, journalists, businesspeople, activists, academics, and embassy workers.“